$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e37752e6-d0d9-38e5-a0a7-0971e173bea8.roa File: e37752e6-d0d9-38e5-a0a7-0971e173bea8.roa (raw, json) Hash identifier: WUI+VT/0zKCikVi5B1SCCSgGGYxeFiwOrcnKgUsdAMg= Subject key identifier: C9:40:DD:35:8A:BD:AC:3B:05:B3:47:94:04:C6:66:6A:DE:2B:DF:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA56913AF534CF84682CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e37752e6-d0d9-38e5-a0a7-0971e173bea8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.37.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:56:91:3a:f5:34:cf:84:68:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3accac5f-32f1-42fd-b12d-9e79700ad26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:3d:c8:cb:80:37:00:a9:4c:0d:a4:b4:37: 18:17:1d:6a:72:ad:df:ed:bc:1a:79:9c:59:98:f1: fd:83:c3:e1:bf:13:88:e1:b3:4f:38:8b:e1:31:8b: b7:ef:9b:8b:02:f1:f9:bf:45:cf:86:d5:f4:d1:0c: 46:b1:b8:60:b6:00:87:db:cb:50:60:ff:65:96:f9: 42:5b:6b:d7:31:5b:22:9e:74:0b:11:a5:0f:22:aa: ef:86:19:30:94:11:25:2a:1f:ef:09:6a:73:a5:0b: ab:84:0e:88:be:72:e6:ce:d3:0d:31:70:9a:a4:66: 1e:e1:d3:c4:a6:7e:18:cb:ec:dd:32:b6:7c:bc:e4: 1b:e5:a8:90:63:87:98:4e:cc:4f:5f:24:8b:ea:cd: 2b:cb:18:9d:d4:ac:3a:b5:12:37:ab:ba:d5:e8:7e: be:99:62:43:39:9a:dd:4b:0b:8c:64:7b:33:b9:c0: 69:48:77:6e:5d:54:18:39:f0:c7:e6:42:d2:80:c1: 3f:11:93:9b:2b:6c:96:c7:82:ce:b3:03:71:c3:03: 6b:30:43:de:db:b4:ae:d4:0c:6c:07:b0:96:48:4e: 6d:a1:de:40:58:fc:9c:e9:58:ee:87:b7:6d:07:f1: 97:40:62:20:6c:8d:78:a6:cb:07:88:49:e8:a0:78: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:DD:35:8A:BD:AC:3B:05:B3:47:94:04:C6:66:6A:DE:2B:DF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e37752e6-d0d9-38e5-a0a7-0971e173bea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:11:ca:af:2d:de:90:df:da:a3:5f:62:06:bb:f7:ae:b0:bc: 22:07:27:be:12:cd:c8:22:f6:ef:0e:af:f6:b9:ae:41:9a:24: b5:b5:fd:de:c2:37:70:82:a6:80:ad:ed:42:1c:c1:7b:37:ee: 6a:7f:de:1a:6a:95:3b:ab:72:bf:84:ef:18:ce:2f:ca:91:b9: 45:b9:70:9d:4b:d7:a0:fd:10:dc:99:16:ba:dd:74:07:51:dc: 6c:f2:82:02:aa:2a:1e:a1:a9:ea:69:b7:52:c2:f5:a1:01:78: a5:8c:ff:15:94:44:f0:71:b3:8e:9b:1e:73:a3:a6:f5:2f:88: c7:07:73:5f:f7:d4:00:28:28:c1:78:e4:15:f8:1b:7c:81:00: 52:3d:cf:0e:6b:da:ec:d1:13:9e:3d:29:6a:55:8d:d9:03:d5: 95:88:0d:48:ab:ca:c3:ef:d4:95:1f:1a:0d:11:d5:4b:0d:e8: 1a:ec:51:7f:63:23:7a:18:ff:85:a5:4e:96:f2:ee:3c:df:14: 6d:73:7b:23:46:12:3c:6e:24:8b:5d:a5:9a:94:f9:5c:7a:6b: a0:d1:e3:3f:c1:3c:fe:46:68:fd:1f:f6:3d:a5:8e:75:d7:4f: 8e:30:49:3d:88:5b:2f:3a:bb:d9:6b:49:46:92:33:bd:7f:99: 86:53:52:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlaROvU0z4RoLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2FjY2FjNWYtMzJmMS00MmZkLWIxMmQtOWU3OTcwMGFkMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrc9yMuANwCpTA2ktDcYFx1qcq3f7bwaeZxZ mPH9g8PhvxOI4bNPOIvhMYu375uLAvH5v0XPhtX00QxGsbhgtgCH28tQYP9llvlC W2vXMVsinnQLEaUPIqrvhhkwlBElKh/vCWpzpQurhA6IvnLmztMNMXCapGYe4dPE pn4Yy+zdMrZ8vOQb5aiQY4eYTsxPXySL6s0ryxid1Kw6tRI3q7rV6H6+mWJDOZrd SwuMZHszucBpSHduXVQYOfDH5kLSgME/EZObK2yWx4LOswNxwwNrMEPe27Su1Axs B7CWSE5tod5AWPyc6Vjuh7dtB/GXQGIgbI14pssHiEnooHiVrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlA3TWKvaw7BbNHlATGZmreK98OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTM3NzUyZTYtZDBkOS0z OGU1LWEwYTctMDk3MWUxNzNiZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALARyq8t3pDf2qNfYga7966wvCIHJ74Szcgi9u8Or/a5rkGaJLW1/d7C N3CCpoCt7UIcwXs37mp/3hpqlTurcr+E7xjOL8qRuUW5cJ1L16D9ENyZFrrddAdR 3GzyggKqKh6hqeppt1LC9aEBeKWM/xWURPBxs46bHnOjpvUviMcHc1/31AAoKMF4 5BX4G3yBAFI9zw5r2uzRE549KWpVjdkD1ZWIDUirysPv1JUfGg0R1UsN6BrsUX9j I3oY/4WlTpby7jzfFG1zeyNGEjxuJItdpZqU+Vx6a6DR4z/BPP5GaP0f9j2ljnXX T44wST2IWy86u9lrSUaSM71/mYZTUlE= -----END CERTIFICATE-----Generated at Tue Oct 21 21:39:23 2025 by rpki-client